EGroupware /
egroupware
| @@ 757-761 (lines=5) @@ | ||
| 754 | $status_only = $undelete = $this->check_access($values['info_id'],EGW_ACL_UNDELETE); |
|
| 755 | } |
|
| 756 | } |
|
| 757 | if ($values['info_id'] && !$this->check_access($values['info_id'],EGW_ACL_EDIT) && !$status_only || |
|
| 758 | !$values['info_id'] && $values['info_id_parent'] && !$this->check_access($values['info_id_parent'],EGW_ACL_ADD)) |
|
| 759 | { |
|
| 760 | return false; |
|
| 761 | } |
|
| 762 | ||
| 763 | // Make sure status is still valid if the type changes |
|
| 764 | if($old['info_type'] != $values['info_type'] && $values['info_status']) |
|
| @@ 1263-1268 (lines=6) @@ | ||
| 1260 | //error_log(__METHOD__.'('.array2string($event).", $ignore_acl, $updateTS)"); |
|
| 1261 | ||
| 1262 | // check if user has the permission to update / create the event |
|
| 1263 | if (!$ignore_acl && ($event['id'] && !$this->check_perms(EGW_ACL_EDIT,$event['id']) || |
|
| 1264 | !$event['id'] && !$this->check_perms(EGW_ACL_EDIT,0,$event['owner']) && |
|
| 1265 | !$this->check_perms(EGW_ACL_ADD,0,$event['owner']))) |
|
| 1266 | { |
|
| 1267 | return false; |
|
| 1268 | } |
|
| 1269 | ||
| 1270 | if ($event['id']) |
|
| 1271 | { |
|
